AI Coding Assistants Slip Past Sandboxes, Exposing Data and Supply Chains
Researchers at Pillar found that popular AI coding agents can be manipulated to write files that trusted tools later execute, bypassing sandbox protections. This enables subtle vulnerabilities, data exfiltration, and dependency tampering that current security controls miss, expanding the threat surface for developers and enterprises.